Proposal for a Safety Qualiﬁcation Program for Vehicle-Integrated PV Modules

: We propose a safety qualiﬁcation program for vehicle-integrated photovoltaic (VIPV) modules, which could serve as a simpliﬁcation, thereby accelerating the homologation process of new vehicle designs. The basis is the current photovoltaic (PV) module safety qualiﬁcation, as deﬁned in IEC 61730:2016, which is compared to automotive norms and regulations because additional safety requirements have to be considered for PV modules used in this application. Therefore, testing based on regulations that concern electrical and electronic equipment in vehicles (ISO 16750), rupture safety of glass and laminated glass in vehicles (ECE R43), and pedestrian safety (ECE R127) are assessed and compared in terms of severity. Additionally, optional testing concerning the long-term stability of VIPV modules is recommended, as a guideline for vehicle manufacturers. If assessed to be necessary, the qualiﬁcation program of IEC 61730 is complemented by the respective tests to ﬁnally present a conclusive safety qualiﬁcation program for VIPV modules in new vehicle designs.


Towards Homologation of Vehicle-Integrated Photovoltaics
One market that has drawn a lot of attention lately, regarding the topic of integrated photovoltaics (PV), is the automotive industry [1][2][3][4][5]. This is especially attributed to the increase in electric vehicles that offer a direct utilization of the generated solar power, resulting in potential benefits for customers as well as power grid operators (i.e., reduced number of charging stops, reduced grid utilization). Additionally, the ongoing price drop on the PV market [6] is reducing the focus on an optimal orientation of the modules towards the sun to achieve highest yield and lowest payback time. Vehicle-integrated photovoltaics (VIPV) can generate significant solar ranges [2], and VIPV products are already commercially available. For example, the Hyundai Sonata [7] or the solar charging system developed by Toyota [8]. Both use a VIPV module in the roof. Figure 1 (left) shows an example of a modern solar roof using shingled crystalline Si solar cell technology [9]. The evolution of concepts in this field is ongoing, and solar electric vehicles (SEVs) featuring solar cells in the whole autobody are currently under development. The passenger vehicle Sion by Sono Motors GmbH [10] uses an autobody, in which PV is integrated into almost all external body surfaces, and the Lightyear One with a solar roof, bonnet, and boot, are further examples of the current high interest in the vehicle industry [11]. Multiple other projects and products use VIPV modules e.g., in commercial trucks, where lightweight VIPV modules are integrated into the rooftops of box bodies [1], as shown in Figure 1   New designs of planar conventional PV modules must be certified according to the safety requirements defined in IEC 61730-2:2016 [12,13] and IEC 61215-2:2021 [14,15], prior to market release. On the automotive side, vehicle components have to fulfill requirements according to a number of standards to ensure safety during vehicle operation. In the case of VIPV modules, each of the required tests on both sides must be passed independently to verify safe operation on the module level as well as on the vehicle level. After ensuring comprehensive component safety by passing all required tests from the mentioned standards, the new design can be applied to the homologation process guided by the road authority of the respective country. The requirements for a vehicle or component to be homologated for roadworthiness are defined in part (13) of directive 2009/661/EC [16]. Since the changes applied to the vehicle in the case of VIPV modules are limited to "the vehicle exterior and accessories", the respective IEC standards for PV and ISO as well as the ECE standards that apply for these exterior elements are relevant. In Table 1 we collected the relevant standards, which may be applicable for VIPV modules.
In this article, we propose a safety qualification program for VIPV modules for the use in vehicle classes M (vehicles having at least four wheels and used for the carriage of passengers) and N (vehicles having at least four wheels and used for the carriage of goods), according to EU decree 2018/858 [17], which combines all necessary testing requirements from standards on the PV and automotive sides. The testing structure from IEC 61730-2:2016 [13] for newly developed PV modules will serve as the basis, since it tests specifically for the safety of PV modules and will be customised by the addition, removal, and modification of tests. To this end, requirements from IEC 61730:2016 and IEC 61215:2021 are compared to specifically select automotive standards, as shown in Table 1. Further requirements for these special devices will be laid out to finally present a conclusive safety qualification program for VIPV modules, which could simplify and, hence, accelerate the type approval process for new vehicle designs.  New designs of planar conventional PV modules must be certified according to the safety requirements defined in IEC 61730-2:2016 [12,13] and IEC 61215-2:2021 [14,15], prior to market release. On the automotive side, vehicle components have to fulfill requirements according to a number of standards to ensure safety during vehicle operation. In the case of VIPV modules, each of the required tests on both sides must be passed independently to verify safe operation on the module level as well as on the vehicle level. After ensuring comprehensive component safety by passing all required tests from the mentioned standards, the new design can be applied to the homologation process guided by the road authority of the respective country. The requirements for a vehicle or component to be homologated for roadworthiness are defined in part (13) of directive 2009/661/EC [16]. Since the changes applied to the vehicle in the case of VIPV modules are limited to "the vehicle exterior and accessories", the respective IEC standards for PV and ISO as well as the ECE standards that apply for these exterior elements are relevant. In Table 1 we collected the relevant standards, which may be applicable for VIPV modules.
In this article, we propose a safety qualification program for VIPV modules for the use in vehicle classes M (vehicles having at least four wheels and used for the carriage of passengers) and N (vehicles having at least four wheels and used for the carriage of goods), according to EU decree 2018/858 [17], which combines all necessary testing requirements from standards on the PV and automotive sides. The testing structure from IEC 61730-2:2016 [13] for newly developed PV modules will serve as the basis, since it tests specifically for the safety of PV modules and will be customised by the addition, removal, and modification of tests. To this end, requirements from IEC 61730:2016 and IEC 61215:2021 are compared to specifically select automotive standards, as shown in Table 1. Further requirements for these special devices will be laid out to finally present a conclusive safety qualification program for VIPV modules, which could simplify and, hence, accelerate the type approval process for new vehicle designs.
Similar to the safety qualification for PV modules defined in IEC 61730:2016 [12,13], the presented proposal covers VIPV devices including the cables and connectors to the vehicle electronics. We will refrain from a detailed study of requirements regarding the complete vehicle as, e.g., is present in ECE-R10 [20]. However, requirements concerning failure modes in the electronic system that may occur, for example, during a crash event, as described in ECE-R95 [22], must be respected and have to be examined separately. Furthermore, we disregard quality characteristics on the material level (e.g., RoHS [26]) and tests concerning module quality and performance are only added if concerned with environmental stability and safety. Road vehicles-Degrees of protection (IP code)-Protection of electrical equipment against foreign objects, water, and access ECE-R10 [20] Uniform provisions concerning the approval of vehicles with regard to electromagnetic compatibility ECE-R43 [21] Uniform provisions concerning the approval of safety glazing materials and their installation on vehicles ECE-R95 [22] Uniform provisions concerning the approval of vehicles with regard to the protection of the occupants in the event of a lateral collision ECE-R100 [23] Uniform provisions concerning the approval of vehicles with regard to specific requirements for the electric power train ECE-R118 [24] Uniform technical prescriptions concerning the burning behavior of materials used in the interior construction of certain categories of motor vehicles ECE-R127 [25] Uniform provisions concerning the approval of motor vehicles with regard to their pedestrian safety performance

Review of Normative References and Regulations
Integrating PV modules into vehicle components implicates a comprehensive safety assessment prior to the homologation process. Hereby, the added PV functionality must not comprise the roadworthiness of the vehicle itself, as stated in Directive 2009/661/EC: "It is appropriate that vehicles be designed, constructed and assembled so as to minimise the risk of injury to their occupants and other road users". The relevant key issues must concern: general testing, electrical loads, fire hazards, mechanical loads, environmental stresses and chemical stability of the devices, as discussed in IEC 61730 and ISO 16750. Furthermore, the safety of VIPV modules may need to also be ensured during operation in a damaged state or after a crash event; these are topics that have not been of interest for conventional PV modules in the past.

Comparison of Standards
IEC 61730 provides unified guidelines for the safety qualification of conventional photovoltaic modules. ISO 16750 describes potential environmental stresses as well as specific tests and requirements for electric and electronic components for vehicles for specific mounting locations in and on vehicles. Since similar tests, but some with different specifications, are described in both standards, a comparative assessment and a subsequent selection of the most stringent testing was applied.
Testing Categories and Pass Criteria The two standards can be classified into the five following sub-sections: The requirements in every sub-section of ISO 16750 are defined by so-called "code letters", which account for a specific set of parameters in the respective test section applicable to the device under test (DUT), which are determined by the mounting location, the max. operation temperature, the vehicle class, and/or the performance class [18]. In case of VIPV modules, the agreements with the specified parameters have to be checked carefully and, if necessary, a new code letter "Z" with adapted test parameters can be applied when the supplier and/or vehicle manufacturer determine that the conditions or tests defined in the ISO 16750 series are not suitable to achieve desired product quality/reliability objectives and/or are not practical [18]. Pass criteria as they are defined in ISO 16750-1 are associated with specific functional status classifications as, e.g., class A: "All functions of the device/system perform as designed during and after the test" or class E: "One or more functions of a device/system do not perform as designed during and after the test and cannot be returned to proper operation without repairing or replacing the device/system" [18]. Classifying a VIPV module according to those functionality classes is, however, not assumed to be sufficient; consequently, the pass criteria from the PV side, as defined in IEC 61730:2016 [12,13], are used in the further course to ensure safe operation of the VIPV modules in terms of electrical functionality and mechanical design. Regarding module quality, which is a non-safety-related key issue for the market acceptance of VIPV systems, we suggest to comply with the 5% power loss criteria specified in IEC 61215 for terrestrial photovoltaic modules [14,15].

General Inspection
Certification of IEC 61730-2 starts with general inspection tests aiming at the overall functionality and manufacturing quality of the module: visual inspection (MST 01), performance measurement at standard conditions (STC) (MST 02), maximum power determination (MST 03), insulation thickness (MST 04), durability of markings (MST 05), sharp edge (MST 06), and bypass diode functionality (MST 07) [13]. Pass criteria after the respective aging tests in IEC 61730-2 are, in general, defined by passing MST 01 (visual inspection) and the insulation tests MST 16 and MST 17, as mentioned in the following Section 2.3, respectively. Tests concerning a general inspection of devices are not defined in ISO 16750.

Electrical Protection/Electrical Loads
In general, PV and, hence, VIPV modules must have an adequate protection against electric shock, which is guaranteed by compliance with requirements of class II according to IEC 61140 [27] or, correspondingly, class A as defined in IEC 61730-1 [12]. Another major aspect when it comes to the safety qualification of newly designed modules is the conformity with the requirements dependent on the maximum system voltage, according to IEC 61730-1 [12]. Accordingly, all modules must feature appropriate insulation thickness and creepage distance specifications (acc. to Table 3 in IEC 61730 1 [12]). Especially, the application of new materials in PV module manufacturing poses additional effort, because material parameters such as the comparative tracking index (CTI) and the relative temperature index (RTI) have to be determined. CTI is a numerical index value related to the maximum voltage, which a material can withstand without a permanent electrically conductive carbon path track when evaluated under specified test conditions, as defined in IEC 60112 [28]. The RTI of an insulating material or system is a value obtained from the time that corresponds to the known temperature index of a reference material or system, when both are subjected to the same aging and diagnostic procedures in a comparative test, according to IEC 60050-212 [29]. For a simplification, and to thereby accelerate the homologation process, device manufactures may use already established compounds in PV manufacturing with well-known material parameters. Furthermore, both standards cover the topic of electrical loads according to their respective requirements, which in some parts appear conflicting. The DUTs in ISO 16750-2 mainly refer to consumer loads, while a PV module represents a generator. ISO 16750-2 defines the requirements corresponding to the maximum supply voltage of devices with 12 V and 24 V, respectively. A new code letter "Z" can be introduced to reflect the supplied voltages for one respective PV system under operation. Tests from IEC 61730-2 in this section comprise: accessibility test (MST 11), cut susceptibility test (MST 12), continuity test for equipotential bonding (MST 13), impulse voltage test (MST 14), insulation test (MST 16), and wet leakage current test (MST 17) [13]. As mentioned before, the insulation tests MST 16 and MST 17 serve as pass criteria after most of the aging tests throughout IEC 61730-2.
The section "4.3 Overvoltage" of ISO 16750-2 ensures safe operation when the generator regulator fails and the output voltage of the generator rises above normal values [18]. That is, however, an unrealistic scenario in the case of PV module operation. The impulse voltage test in IEC 61730-2 (MST 14), which defines modules to withstand over-voltages of atmospheric origin [13] (e.g., lightning), seems to be an equivalent test for VIPV modules. Since VIPV modules are classified as class II according to IEC 61140, the insulation resistance measurement MST 16 (IEC 61730-2) is assumed to adequately reproduce realistic conditions, and no further criteria concerning insulation issues of ISO 16750-2 must be considered. Therefore, a preceding damp-heat cycle, which is demanded in ISO 16750-2 [18], will be disregarded, since this environmental stress is applied with more intensive loads during Sequence D in IEC 61730-2 [13]. A PV module represents a generator and, hence, tests from ISO 16750-2 concerning direct current supply (4.2), slow decrease and increase in supply voltage (4.5), discontinuities in supply voltage (4.6), and ground reference and supply offset (4.8) [18], are not applicable for qualification. Section 4.11 (withstand voltage) is only mandatory for applications including inductive elements, which also does not account for PV modules. Moreover, an open circuit test (4.9), as well as a test concerning short circuit protection (4.10), is not regarded to be necessary, because no additional risks are expected when operating in these modifications. Tests that are not directly connected to the safety qualification of VIPV modules, but could become important in the final testing on the vehicle side, are superimposed alternating voltage (4.4) and those that check the electromagnetic compatibility (EMC). One additional test mentioned in this section (4.7 reversed voltage) is, according to ISO 16750-2, not applicable to generators. Due to safety considerations, however, reverse operation of the PV devices must be considered and is discussed in the following section, "fire hazards".
Regulation ECE-R100 defines the approval of vehicles due to their requirements concerning the electrical drive and mentions advanced safety requirements. One example is section "5.1.1.3 Connectors, (d)", where it is defined that the voltage of active parts has to be equal or below 60 V DC within one second after the separation of connectors, which could be the case after a crash event. One approach could be to limit the overall system voltage to a maximum of 60 V DC and thereby avoid conflicts with the safety requirements of a "high voltage" system defined in this regulation. This would also be accompanied by a reduction of the prescribed insulation thicknesses, as mentioned earlier.

Fire Hazards
Protection against fire hazards is crucial and especially important during and after crash events. Defined tests in IEC 61730-2 comprise a temperature test (MST 21), a hot-spot endurance test (MST 22), an ignitability test (MST 24), a bypass diode thermal test (MST 25), and a reverse current overload test (MST 26) [13]. The definition of the respective test current in MST 26 may be adapted by the safety design of the module concept. An explicit fire test (MST 23), as mentioned, refers directly to building standards for BIPV applications. Apart from the ignitability test, a flammability class of minimum V1 according to IEC 60695-11-10 [30] is demanded for materials that are used on the exterior (not thin layers) of PV modules in IEC 61730-1 [13]. On the automotive side, a separate legal act, ECE-R118 deals with this issue. Those tests are, however, solely applicable to materials used in the passenger compartment, the engine compartment, and in separate boiler rooms [24]. Moreover, a fire test defined in ECE-R43 is only applicable to materials used in the passenger compartment. If it is guaranteed that no flammable splinters can penetrate into the interior of the vehicle after module breakage, which can be ensured by compliance with the rupture and splinter resistance in ECE-R43, no further demonstration of fire resistance beyond the requirements of the specifications in IEC 61730-2, is proposed.
Special attention shall be paid to hot-spot formation in VIPV modules and the development of an appropriate certification test sequence. Previous observations suggest that vibrational loads, as they are expected during VIPV operation, increase the probability of crack formation and/or propagation in solar cells. Consequently, the risk of hot-spot formation, which might exceed the worst-case scenario examined throughout the hot-spot test according to IEC 61730-2:2016, is assumed to be significantly increased. However, the topic has to be investigated in more detail, before a conclusive assessment can be given. For a first approximation to the topic, a vibrational test, according to ISO 16750-3 prior to the hot-spot test in the certification sequence, is proposed.  [13]. The static mechanical load test (MST 34) in its original shape is assumed to not appropriately simulate mechanical loads that arise during vehicle operation. The test can, however, serve as a basis with individual alignments due to the mounting type and location, e.g., a VIPV bonnet module, which is exposed to mechanical stresses originating from air streams at high velocities. It might also be necessary to ensure the static mechanical load stability of a roof-top module, when the vehicle rolls over in a crash event and remains in an upside-down position.

Mechanical Loads
Also, it is mandatory to consider the supporting structure and the mounting specifications used in the vehicle, to reproduce mechanical conditions and restraints as realistically as possible. Additionally, loads in the form of vibrations originating from door slamming or rough road driving that were not of interest in conventional PV applications become crucial to state the stability and, consequently, the safety of VIPV modules. Therefore, we recommend to extend the mechanical load testing by the tests from ISO 16750-3 [18]. Dependent on the vehicle class (M or N) and the mounting location, different requirements have to be considered, which in the case of VIPV modules are confined to the section "Mounting on the exterior" and the corresponding code letters D, E, K, and L, according to ISO 16750-3 [18]. Under this directive, DUTs have to pass a vibrational test concerning sprung masses (test IV-passenger vehicles or test VII-commercial vehicles) and a mechanical shock test that simulates door slamming [18].
A test concerning the stability against free fall is also mentioned, but assessed to be not applicable for VIPV modules, since the breakage and splinter protection is tested elsewhere (ECE-R43), and a quality test after breakage is not demanded in the context of the here-presented proposal. In especially exposed mounting locations (e.g., front fender, side doors etc.), a test concerning the rupture safety due to gravel bombardment as indicated in ISO16750-3 can be reasonable to evaluate the mechanical stability of the module. Furthermore, long-term stability during vehicle operation can be ensured by such testing. The same accounts for a hail test, as defined in IEC 61215-2 (MQT 17). Since a damaged module will probably not be identified immediately in the case of VIPV, continuative mechanical testing after breakage could further increase the overall system safety.
A test called "Surface Strength/Scratch and Abrasion Resistance" in ISO 16750-3 is not specifically defined and not mandatory, but has to be agreed upon between manufacturer and customer [18]. For market acceptance, however, a specific definition of this section is recommended, so that the scratch resistance of modules for scenarios such as removal of snow loads, shopping cart collisions, or branches scratching over the surface when passing trees, is ensured. An experimental setup could be an enhancement of the cut susceptibility test for polymeric surfaces of PV modules (MST 12) in IEC 61730-2, where a small wagon pulls a blade with a defined load (=8.9 N) and velocity (=150 mm/s) over the DUT [13], as indicated in Figure 2. This test could be modified by changing the blade shape and material (e.g., to a wooden stick) and adjusting the load, the pulling velocity, and the repetitions applied to the DUT, to thereby simulate different stress scenarios. In the interest of robust VIPV modules, we suggest to perform the test to all relevant external surfaces regardless of the kinds of materials used. In terms of market acceptance, the pass criteria could be reviewed and stringent, e.g., so that not only the insulation properties, but also visual damages, lead to failure of the test.
Sustainability 2021, 13, x FOR PEER REVIEW 7 of 15 manufacturer and customer [18]. For market acceptance, however, a specific definition of this section is recommended, so that the scratch resistance of modules for scenarios such as removal of snow loads, shopping cart collisions, or branches scratching over the surface when passing trees, is ensured. An experimental setup could be an enhancement of the cut susceptibility test for polymeric surfaces of PV modules (MST 12) in IEC 61730-2, where a small wagon pulls a blade with a defined load (=8.9 N) and velocity (=150 mm/s) over the DUT [13], as indicated in Figure 2. This test could be modified by changing the blade shape and material (e.g., to a wooden stick) and adjusting the load, the pulling velocity, and the repetitions applied to the DUT, to thereby simulate different stress scenarios. In the interest of robust VIPV modules, we suggest to perform the test to all relevant external surfaces regardless of the kinds of materials used. In terms of market acceptance, the pass criteria could be reviewed and stringent, e.g., so that not only the insulation properties, but also visual damages, lead to failure of the test.

Rupture Safety
Additional testing, according to ECE-R43 (laminated safety glass [21]) and ECE-R127 (pedestrian safety [25]), is necessary to ensure comprehensive safety of the modules. In ECE-R43, dependent on the type and thickness of glass used in the module (tempered glass, laminated glass, or glass-polymer) or polymer glazing (rigid polymer or double glazing), the tests have to be selected according to the tables in Section 8.2.1.1-"Other than windshields" and 8.2.1.2 "Polymer glazing other than windshields" [21], respectively. One mechanical test, which is applicable in each case but with different drop heights and at different temperature preconditioning dependent on the material and thickness of the DUT, is the 227 g ball drop test. The rupture safety is ensured by passing the test, without penetration of the ball through the material and no breakage into sharp pieces. The phantom fall test defined in the ECE-R43 is discussed in comparison with tests from other standards in the section below. Furthermore, an abrasion test is mentioned, which is advised to be replaced by the formerly described test concerning scratch and abrasion resistance on a qualitative level. Tests concerning optical properties are not necessary, because no VIPV module will be installed in the field of vision of drivers. For laminated polymers, however, the brittleness and the adhesion also have to be determined with the cross cut test, as defined in A3/13 of ECE-R43 [21].

Pedestrian Safety
Another new requirement for VIPV modules that does not apply for conventional PV modules in field operation concerns pedestrian safety. Passing those requirements is crucial, because no type approval will be issued for vehicles when pedestrian safety is not ensured. Therefore, externally mounted VIPV modules have to pass tests with two different focus points: (a) legform to bumper test-DUTs mounted directly on the vehicle

Rupture Safety
Additional testing, according to ECE-R43 (laminated safety glass [21]) and ECE-R127 (pedestrian safety [25]), is necessary to ensure comprehensive safety of the modules. In ECE-R43, dependent on the type and thickness of glass used in the module (tempered glass, laminated glass, or glass-polymer) or polymer glazing (rigid polymer or double glazing), the tests have to be selected according to the tables in Section 8.2.1.1-"Other than windshields" and 8.2.1.2 "Polymer glazing other than windshields" [21], respectively. One mechanical test, which is applicable in each case but with different drop heights and at different temperature preconditioning dependent on the material and thickness of the DUT, is the 227 g ball drop test. The rupture safety is ensured by passing the test, without penetration of the ball through the material and no breakage into sharp pieces. The phantom fall test defined in the ECE-R43 is discussed in comparison with tests from other standards in the section below. Furthermore, an abrasion test is mentioned, which is advised to be replaced by the formerly described test concerning scratch and abrasion resistance on a qualitative level. Tests concerning optical properties are not necessary, because no VIPV module will be installed in the field of vision of drivers. For laminated polymers, however, the brittleness and the adhesion also have to be determined with the cross cut test, as defined in A3/13 of ECE-R43 [21].

Pedestrian Safety
Another new requirement for VIPV modules that does not apply for conventional PV modules in field operation concerns pedestrian safety. Passing those requirements is crucial, because no type approval will be issued for vehicles when pedestrian safety is not ensured. Therefore, externally mounted VIPV modules have to pass tests with two different focus points: (a) legform to bumper test-DUTs mounted directly on the vehicle front which is up to now an unusual position for mounting a VIPV module, and (b) headform test-applicable to DUTs mounted in the hood-area and, currently, interesting for module mounting [25]. The latter test is, hence, especially important for VIPV modules in this mounting location and has to be passed with head injury criterion (HIC) values of ≤1000 and ≤1700 in the respective areas, as defined in the regulation [25]. The HIC is a dimensionless value and is calculated from the acceleration values determined throughout the headform test. Here, representative mounting and support, as will be used on the vehicle, is important for accurate results.

Comparison of Three Different Impact Test Scenarios
An example of how equivalent tests from different standards vary throughout their specifications is shown within Table 2. In each standard, a test including an impact of a different type that represented the maximum load in the respective standard applicable to VIPV modules was chosen: the module breakage test (MST 32) from IEC 61730-2 [13] is compared to the phantom fall test from ECE-R43 [21] and the adult headform test from ECE-R127 [25]. The calculated energy of the impactor is highest during the phantom fall test, as defined in ECE-R43. Due to the equivalent pass criteria, we assess that the module breakage test, according to IEC 61730-2, can be omitted without losing module safety, when the phantom fall test is applied to full modules instead of only material samples, as requested in ECE-R43 [21]. The headform test, according to ECE-R127, must be executed regardless in the case of bonnet modules, so that pedestrian safety is completely guaranteed.

Climatic Loads
Since PV modules are especially dedicated to outdoor operation, climatic testing has been essential from the beginning to ensure electrical system safety. For standard PV modules, this is approved by passing the module qualification, as defined in IEC 61730-2 [13]. Similar tests for electrical applications are also defined on the automotive side in ISO 16750-4, depending on the respective mounting location on the vehicle [18]. The installation site of VIPV modules will be standard on the exterior (body, frame, and/or doors), so that climatic testing corresponding to code letter D, according to Table 4 in ISO 16750-4 [18], applies. The recommended temperature range in which the tests are executed shall be changed from code letter E, which applies to externally mounted parts (T-range = −40 • C to 75 • C), to G (T-range = −40 • C to 85 • C), to provide conformity to the requirements for PV modules defined in IEC 61730-2 [13]. However, a further extension of the temperature range to code letter I (max. 95 • C) may be used, if desired, for quality control by the manufacturer. Table 3 shows a compilation of the climatic tests of IEC 61730-2 on the left, which comprise temperature cycle (MST 51), humidity freeze (MST 52), damp heat (MST 53), UV preconditioning (MST 54), cold conditioning (MST 55), and dry hot conditioning (MST 56) [13]. For all of those, a comparable test with similar testing conditions is present in ISO 16750-4 ( Table 3, right). Since the testing conditions of IEC 61730-2 are consistently harsher than in ISO 16750-4, the use of the general climatic tests from the PV standards is concluded to be sufficient to ensure the weatherability and, conclusively, proves electrical system safety in different climatic conditions more than equally. Additional climatic stress tests for safety glass components are material dependent and are defined in ECE-R43. There, safety glasses have to pass tests comprising increased temperatures (A3/5), resistance against radiation (A3/6), resistance against humidity (A3/7), and resistance against temperature cycling (A3/8) [21]. Polymer materials have to pass a test concerning weatherability (A3/6.4), which comprises UV radiation under damp heat conditions and resistance against humidity (A14/6.4 or A16/6.4) [21]. Disregarding temperature cycling (A3/8) and increased temperatures (A3/5), the tests request more stringent requirements compared to IEC 61730-2:2016 and, hence, an additional test sequence is added in the test structure ( Figure A1).

Chemical Loads
According to IEC 61730-2, standard PV modules do not have to pass tests concerning their chemical resistance against specific substances. Considering VIPV modules in road traffic, exposition to a variety of chemicals is expected. Within ECE-R43, a test for resistance against chemical substances is described but is recommended to be replaced by referring to ISO 16750-5, because of a greater extent of substances and more stringent pass/fail criteria.
In ISO 16750-5, a specific collection of chemicals for testing electrical applications mounted on the exterior are defined by referring to code letter D, according to Table 1 [18]. This collection includes urea, cavity protection, protective lacquer, protective lacquer remover, windscreen washer fluid, vehicle washing chemicals, glass cleaner, wheel cleaner, cold cleaning agent, ammonium-containing cleaner, denatured alcohol, and runway deicer. Dependent on the compound, the method applied to the DUT is spraying (I), brushing (II), wiping (III), pouring (IV), dipping (V), and/or immersing (VI), according to Table 2 in ISO 16750-5 [18]. The time span for which the load is applied is also dependent on the chemical compound and lies in the range between 10 min and 22 h, either at room temperature or at the maximum operating temperature, as defined by the corresponding code letter in ISO 16750-5. Especially during winter, modules will be additionally exposed to salt mist and the resistance of the modules against such high corrosive environments must be ensured as well. Therefore, testing according to IEC 61701 [31] and IEC 60068-2-52 [32] (method 7 and 8) is proposed. Since testing mentioned within this section is missing in IEC 61730-2 but is indispensable to ensure the resistance of modules against chemical loads especially in urban environments, the previously mentioned test loads are recommended to be added to the qualification program.

Conclusions
Here, we demonstrate that, compared to a certification of conventional, planar PV modules, the homologation of VIPV modules poses additional effort. The main reason is that the module safety and, hence, the roadworthiness must be ensured by adherence to several further regulations and standards from the automotive side, before a homologation process by the road authorities can be completed. The already existing extensive safety testing, as defined in IEC 61730:2016 and IEC 61215:2021, can serve as a solid basis for a comprehensive safety qualification program for VIPV modules, which can be complemented by the addition and/or modification of tests concerning chemical resistance, mechanical vibration, shock, and impact. According to IEC 61730:2016, a previous system assessment is necessary in order to specify test parameters, e.g., system voltage for electrical testing. The recommended changes and modifications applied to the test sequences in IEC 61730:2016 are summarised within Table 4. Modifications in this proposal regarding pass criteria for the functionality of the VIPV modules and adjustments of the testing specifications, e.g., regarding continuative testing of partly broken modules, may have to be addressed in the future. Furthermore, testing of the entire vehicle may pose additional challenges, which were not specifically considered within this investigation.
In Appendix A ( Figure A1), our proposal for a qualification program for VIPV modules is finally presented, with the test sequences of IEC 61730-2 [18] as the basic structure. This test scheme was, according to the reasoning presented above, customised to build up a conclusive basic proposal for a VIPV module safety qualification program.  . Proposal for a VIPV module qualification program with IEC 61730-2 as the basis [13] and added tests from ISO 16750 (−1 to −5), ECE-R43, ECE-R127, and IEC 61215-2; added tests, as well as removed ones from the previous existing structure, are indicated; qualification testing is labeled separately.